CRITICAL🇵🇱 Wersja polska

CVE-2022-23402

CVSS 9.8v3.1pub. 2022-03-11upd. 2024-11-21

The following Yokogawa Electric products hard-code the password for CAMS server applications: CENTUM VP versions from R5.01.00 to R5.04.20 and versions from R6.01.00 to R6.08.00, Exaopc versions from R3.72.00 to R3.79.00

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Yokogawa Centum Vp

    HW
    Yokogawa
    all versions

  • Yokogawa Centum Vp Entry

    HW
    Yokogawa
    all versions

  • Yokogawa Centum Vp Entry Firmware

    OS
    Yokogawa
    r5.01.00 – r5.04.20r6.01.00 – r6.09.00 (excl.)

  • Yokogawa Centum Vp Firmware

    OS
    Yokogawa
    r6.01.00 – r6.09.00 (excl.)r5.01.00 – r5.04.20

  • Yokogawa Exaopc

    APP
    Yokogawa
    r3.72.00 – r3.80.00 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-26034CRITICAL9.1PL ✓same product

Obejście uwierzytelnienia w serwerze AD Yokogawa CENTUM VP i B/M9000 VP

CVE-2022-21194CRITICAL9.8PL ✓same product

Yokogawa CENTUM VP — niezmienione domyślne hasła kont Windows

CVE-2020-5608CRITICAL9.8PL ✓same product

Pominięcie uwierzytelnienia w CAMS for HIS systemów Yokogawa CENTUM

CVE-2020-5609CRITICAL9.8PL ✓same product

Path traversal w Yokogawa CENTUM CS 3000/VP — zdalne wykonanie kodu

CVE-2015-5627CRITICAL9.8PL ✓same product

Stack-based buffer overflow w systemach przemysłowych Yokogawa — DoS przez sieć